OpenAS2 on Ubuntu 24.04 LTS by cloudimg

OpenAS2 on Ubuntu 24.04 LTS

OpenAS2 is an open source Java implementation of the AS2 protocol (RFC 4130), the standard for exchanging EDI and other business documents securely over HTTP with digital signatures, encryption and signed MDN (Message Disposition Notification) receipts. A trading partner sends you a signed and encrypted payload, OpenAS2 verifies the signature, decrypts the content, writes it to an inbox and returns a signed MDN as cryptographic proof of receipt.

This image builds OpenAS2 4.8.3 from the pinned upstream source and runs it as an unprivileged systemd service. The AS2 receiver listens on port 10080, and a ready to run loopback partnership plus a self test helper let you prove the full send, receive and MDN round trip the moment the VM boots.

Secure by default

The upstream distribution ships a demo keystore holding live private keys unlocked by a well known password, an embedded database TCP server guarded by a default password, and default management credentials. None of these survive into the image. The demo keystore is removed, the database TCP server is disabled and the management processors are disabled, so no default credential and no management listener ships. On first boot the image generates a fresh per VM PKCS#12 AS2 keystore with new self signed key pairs and a unique keystore password, records them to a root only file and exports your public certificate to share with partners. No two instances share a private key.

What cloudimg adds

• OpenAS2 4.8.3 built from the pinned upstream release, hardened and ready to run
• A fresh per VM AS2 keystore and password generated on first boot, with the demo keystore and default passwords removed
• A ready to run loopback partnership and self test that proves the signed and encrypted message plus MDN round trip
• A paired step by step deployment guide and 24/7 cloudimg support with a 24 hour response SLA

Licensing

OpenAS2 is free software under the GNU General Public License v3.0. There is no per partner or per seat fee. The cloudimg charge of 0.04 US dollars per vCPU hour covers packaging, security patching, image maintenance and support. cloudimg is not affiliated with or endorsed by the OpenAS2 project.